Apple

iOS 26.5 and iPadOS 26.5

127110 May 11, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/127110. 61 CVE entries, 23 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/127110

Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

127 lines

Showing 1–50 of 127 · page 1 of 3

CVE-2026-28991 BR2026-0000-006961 Accelerate unclaimed

An app may be able to cause a denial-of-service

Credited as Seiji Sakurai (@HeapSmasher)

CVE-2026-28988 BR2026-0000-006962 Accounts unclaimed

An app may be able to bypass certain Privacy preferences

Credited as Asaf Cohen

CVE-2026-28959 BR2026-0000-006963 APFS unclaimed

An app may be able to cause unexpected system termination

Credited as Dave G.

CVE-2026-28995 BR2026-0000-006964 App Intents unclaimed

A malicious app may be able to break out of its sandbox

Credited as Vamshi Paili

CVE-2026-28995 BR2026-0000-006965 App Intents unclaimed

A malicious app may be able to break out of its sandbox

Credited as Tony Gorez (@tonygo_) for Reverse Society

CVE-2026-28956 BR2026-0000-006966 AppleJPEG unclaimed

Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory

Credited as impost0r (ret2plt)

CVE-2026-39869 BR2026-0000-006967 Audio unclaimed

Processing an audio stream in a maliciously crafted media file may terminate the process

Credited as David Ige of Beryllium Security

CVE-2026-28964 BR2026-0000-006968 CoreAnimation unclaimed

An app may be able to access sensitive user data

Credited as Alan Wang

CVE-2026-28964 BR2026-0000-006969 CoreAnimation unclaimed

An app may be able to access sensitive user data

Credited as Christopher W. Fletcher

CVE-2026-28964 BR2026-0000-006970 CoreAnimation unclaimed

An app may be able to access sensitive user data

Credited as Hovav Shacham

CVE-2026-28964 BR2026-0000-006971 CoreAnimation unclaimed

An app may be able to access sensitive user data

Credited as David Kohlbrenner

CVE-2026-28964 BR2026-0000-006972 CoreAnimation unclaimed

An app may be able to access sensitive user data

Credited as Riccardo Paccagnella

CVE-2026-28936 BR2026-0000-006973 CoreServices unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Andreas Jaegersberger

CVE-2026-28936 BR2026-0000-006974 CoreServices unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Ro Achterberg of Nosebeard Labs

CVE-2026-28918 BR2026-0000-006975 CoreSymbolication unclaimed

Parsing a maliciously crafted file may lead to an unexpected app termination

Credited as Niels Hofmans

CVE-2026-28918 BR2026-0000-006976 CoreSymbolication unclaimed

Parsing a maliciously crafted file may lead to an unexpected app termination

Credited as Anonymous working with TrendAI Zero Day Initiative

CVE-2026-43659 BR2026-0000-006977 FileProvider unclaimed

An app may be able to access sensitive user data

Credited as Alex Radocea

CVE-2026-28977 BR2026-0000-006978 ImageIO unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Suresh Sundaram

CVE-2026-28990 BR2026-0000-006979 ImageIO unclaimed

Processing a maliciously crafted image may corrupt process memory

Credited as Jiri Ha

CVE-2026-28990 BR2026-0000-006980 ImageIO unclaimed

Processing a maliciously crafted image may corrupt process memory

Credited as Arni Hardarson

CVE-2026-28992 BR2026-0000-006981 IOHIDFamily unclaimed

An attacker may be able to cause unexpected app termination

Credited as Johnny Franks (@zeroxjf)

CVE-2026-28943 BR2026-0000-006982 IOHIDFamily unclaimed

An app may be able to determine kernel memory layout

Credited as Google Threat Analysis Group

CVE-2026-28969 BR2026-0000-006983 IOKit unclaimed

An app may be able to cause unexpected system termination

Credited as Mihalis Haatainen

CVE-2026-28969 BR2026-0000-006984 IOKit unclaimed

An app may be able to cause unexpected system termination

Credited as Ari Hawking

CVE-2026-28969 BR2026-0000-006985 IOKit unclaimed

An app may be able to cause unexpected system termination

Credited as Ashish Kunwar

CVE-2026-43655 BR2026-0000-006986 IOSurfaceAccelerator unclaimed

An app may be able to cause unexpected system termination or read kernel memory

Credited as Somair Ansar

CVE-2026-43654 BR2026-0000-006987 Kernel unclaimed

An app may be able to disclose kernel memory

Credited as Vaagn Vardanian

CVE-2026-43654 BR2026-0000-006988 Kernel unclaimed

An app may be able to disclose kernel memory

Credited as Nathaniel Oh (@calysteon)

CVE-2026-28897 BR2026-0000-006989 Kernel unclaimed

A local user may be able to cause unexpected system termination or read kernel memory

Credited as popku1337

CVE-2026-28897 BR2026-0000-006990 Kernel unclaimed

A local user may be able to cause unexpected system termination or read kernel memory

Credited as Billy Jheng Bing Jhong

CVE-2026-28897 BR2026-0000-006991 Kernel unclaimed

A local user may be able to cause unexpected system termination or read kernel memory

Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

CVE-2026-28897 BR2026-0000-006992 Kernel unclaimed

A local user may be able to cause unexpected system termination or read kernel memory

Credited as Robert Tran

CVE-2026-28897 BR2026-0000-006993 Kernel unclaimed

A local user may be able to cause unexpected system termination or read kernel memory

Credited as Aswin kumar Gokulakannan

CVE-2026-28951 BR2026-0000-006994 Kernel unclaimed

An app may be able to gain root privileges

Credited as Csaba Fitzl (@theevilbit) of Iru

CVE-2026-28972 BR2026-0000-006995 Kernel unclaimed

An app may be able to cause unexpected system termination or write kernel memory

Credited as Billy Jheng Bing Jhong

CVE-2026-28972 BR2026-0000-006996 Kernel unclaimed

An app may be able to cause unexpected system termination or write kernel memory

Credited as Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

CVE-2026-28972 BR2026-0000-006997 Kernel unclaimed

An app may be able to cause unexpected system termination or write kernel memory

Credited as Ryan Hileman via Xint Code (xint.io)

CVE-2026-28986 BR2026-0000-006998 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Chris Betz

CVE-2026-28986 BR2026-0000-006999 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Tristan Madani (@TristanInSec) from Talence Security

CVE-2026-28986 BR2026-0000-007000 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Ryan Hileman via Xint Code (xint.io)

CVE-2026-28987 BR2026-0000-007001 Kernel unclaimed

An app may be able to leak sensitive kernel state

Credited as Dhiyanesh Selvaraj (@redroot97)

CVE-2026-28983 BR2026-0000-007002 LaunchServices unclaimed

A remote attacker may be able to cause a denial of service

Credited as Ruslan Dautov

CVE-2026-43653 BR2026-0000-007003 mDNSResponder unclaimed

An attacker on the local network may be able to cause a denial-of-service

Credited as Atul R V

CVE-2026-28985 BR2026-0000-007004 mDNSResponder unclaimed

An attacker on the local network may be able to cause a denial-of-service

Credited as Omar Cerrito

CVE-2026-43668 BR2026-0000-007005 mDNSResponder unclaimed

A remote attacker may be able to cause unexpected system termination or corrupt kernel memory

Credited as Anton Pakhunov

CVE-2026-43668 BR2026-0000-007006 mDNSResponder unclaimed

A remote attacker may be able to cause unexpected system termination or corrupt kernel memory

Credited as Ricardo Prado

CVE-2026-43666 BR2026-0000-007007 mDNSResponder unclaimed

An attacker on the local network may be able to cause a denial-of-service

Credited as Ian van der Wurff (ian.nl)

CVE-2026-28940 BR2026-0000-007008 Model I/O unclaimed

Processing a maliciously crafted image may corrupt process memory

Credited as Michael DePlante (@izobashi) of TrendAI Zero Day Initiative

CVE-2026-28906 BR2026-0000-007009 Networking unclaimed

An attacker may be able to track users through their IP address

Credited as Ilya Sc. Jowell A.

CVE-2026-43656 BR2026-0000-007010 Quick Look unclaimed

Parsing a maliciously crafted file may lead to an unexpected app termination

Credited as Peter Malone